Signalis
sign in--:--:--UTC
CVEs

CVE-2026-64849

exploited in the wild☆ pin
CVSS
9.3
Reports
7
First seen
Aug 18, 2026
Last seen
Sep 16, 2026
Affected product

MLflow

Associated actors

UNC7005 ×2ByteToBreach ×1Clop ×1Fire Ant ×1Lazarus ×1Mabna Institute ×1MarlboroMan ×1Matryoshka ×1QTFY ×1APT29 ×1ShinyHunters ×1Storm-1516 ×1Storm-2755 ×1TeamPCP ×1UNC5174 ×1UNC5976 ×1UNC6293 ×1Sandworm ×1

Recent reports

Critical

Oracle Critical Security Patch Update – September 2026: Multiple CVEs with Active Exploitation

GovCERT.HKHigh

CERT-EU Cyber Brief August 2026: Espionage, Ransomware, and Supply-Chain Compromises

CERT-EU Threat IntelCritical

Weekly Recap: AI-Powered PLC Attacks, GitLab Exploits, Supply Chain Threats

The Hacker NewsCritical

CISA warns of hackers exploiting critical MLflow vulnerability

Bleeping ComputerHigh

MLflow security advisory – CVE-2026-64849 added to CISA KEV database

Canadian Centre AlertsHigh

CISA Adds MLflow SSRF Vulnerability to Known Exploited Vulnerabilities Catalog

CISA AdvisoriesCritical

Attackers Exploit MLflow SSRF and FUXA Path Traversal Flaws to Steal Cloud Credentials

The Hacker News

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans